error during enable TLSv1.3 in cPanel86

celiac101

Well-Known Member
Dec 19, 2012
95
1
8
cPanel Access Level
Website Owner
I am using CENTOS 7.8 v88.0.11 and Easy Apache 4 and cannot get TLS v1.3 working using any of the above methods. Any idea why this doesn't work in 88?
 
Last edited:

celiac101

Well-Known Member
Dec 19, 2012
95
1
8
cPanel Access Level
Website Owner
When I run that command it shows this:
ea-openssl11-1.1.1g-1.1.2.cpanel.x86_64

And I determined it was not working via running my site at:
and seeing these results:
TLS 1.3 - No
TLS 1.2 - Yes
TLS 1.1 - No
TLS 1.0 - No
SSL 3 - No
SSL 2 - No

It looks to me like this package is missing. If so, could you give me the command to install it?
ea-openssl11-devel-1.1.1g-1.1.2.cpanel.x86_64
 

cPanelLauren

Technical Support Community Manager
Staff member
Nov 14, 2017
11,895
1,068
313
Houston
It is missing and the command to install it is

Code:
yum -y install ea-openssl11-devel-1.1.1g-1.1.2.cpanel.x86_64
What did you set in WHM>>Service Configuration>>Apache Configuration -> Global Configuration -> SSL/TLS Protocols? Here is what I have and my results on the same server from Qualys
Code:
+TLSv1.2 +TLSv1.3
Screenshot at Jul 01 16-04-30.png
 

celiac101

Well-Known Member
Dec 19, 2012
95
1
8
cPanel Access Level
Website Owner
Ok, I have the same protocols in my apache config.
+TLSv1.2 +TLSv1.3

Before I run that installation line, will doing so force me to do anything, like re-install my ssl certs? I don't want any surprises and have sites go down.
 

celiac101

Well-Known Member
Dec 19, 2012
95
1
8
cPanel Access Level
Website Owner
I ran:
yum -y install ea-openssl11-devel-1.1.1g-1.1.2.cpanel.x86_64

and the install was successful:
# rpm -qa |grep ea-openssl1

ea-openssl11-1.1.1g-1.1.2.cpanel.x86_64
ea-openssl11-devel-1.1.1g-1.1.2.cpanel.x86_64

and I restarted Apache and the Engintron plugin (I am running NGINX). Unfortunately the retest of my server at Qualys SSL Labs still does not show it working:
TLS 1.3No
 

celiac101

Well-Known Member
Dec 19, 2012
95
1
8
cPanel Access Level
Website Owner
So when I turn off Engintron my TLS 1.3 works fine:
This server supports TLS 1.3.

When I enable Engintron it does not work. I even tried uninstalling Engintron and re-installing it.

If you have any ideas please let me know.
 

cPanelLauren

Technical Support Community Manager
Staff member
Nov 14, 2017
11,895
1,068
313
Houston
So when I turn off Engintron my TLS 1.3 works fine:
This server supports TLS 1.3.

When I enable Engintron it does not work. I even tried uninstalling Engintron and re-installing it.

If you have any ideas please let me know.
I don't know, it might the best to ask engintron. The issue is that their software has been known to cause issues with cPanel.